CVE-2024-11557

Summary

CVE-2024-11557 is a remote code execution vulnerability affecting IrfanView, a popular multimedia viewer. The issue lies in the application's DXF file parsing functionality, where insufficient data validation leads to memory corruption. An attacker can exploit this vulnerability by crafting a malicious DXF file or luring users to a malicious website. Successful exploitation allows the attacker to execute arbitrary code in the context of the IrfanView process.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.